Exploitation ongoing with high activity in latest observed window (3 mentions)
Recommended action window: Immediate (within 24h)
NVD description
The FieldX MDM adb messaging topic passes unverified payloads directly into Runtime.exec(), allowing command/instruction injection.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
CVE-2026-49185 The FieldX MDM adb messaging topic passes unverified payloads directly into Runtime.exec(), allowing command/instruction injection. https://www.cve.org/CVERecord?id=CVE-2026-49185
Post summary
The FieldX MDM allows unverified payloads to reach Java Runtime.exec(), creating a command injection vulnerability (CVE-2026-49185).
It is possible to see elevated activities targeting Acer Connect M6E 5G Portable WiFi Router (CVE-2026-49185) https://vuldb.com/vuln/368247/cti
Post summary
The post reports elevated activity targeting the Acer Connect M6E 5G router (CVE‑2026‑49185), implying possible active exploitation, but provides no PoC, exploit tool, patch, or technical details.
Critical 10.0: CVE-2026-49185 hits FieldX MDM with unauthenticated OS command injection. Unverified adb payloads go straight into Runtime.exec(). No auth, no interaction, full system compromise. https://secalerts.co/vulnerability/CVE-2026-49185 https://t.co/y6nCgQF1HF
Post summary
FieldX MDM is susceptible to unauthenticated OS command injection (CVE‑2026‑49185), enabling attackers to execute arbitrary commands; the post supplies technical details and a PoC link but does not report active attacks or a patch.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | acer | connect_m6e_5g | - | - | - |
| OS | acer | connect_m6e_5g_firmware | - | - | - |